Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: QVPT0SCJnS2KgOpH14g/8h7CFJCX/JhcBu2maj98sGU=
Subject key identifier: 63:52:5B:BE:BD:56:00:6B:4C:B9:C9:51:DD:0D:9F:5B:52:7E:28:41
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 0194BCA9CC1228FABAC464D3FF93541813FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 063D
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: gGZPktXNuylzcN0RiYtOIaCjFFDN9smn3tYS36XyuqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cc:12:28:fa:ba:c4:64:d3:ff:93:54:18:13:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=63525bbebd56006b4cb9c951dd0d9f5b527e2841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:27:18:2d:a7:d1:99:61:50:c3:0e:f4:42:
9e:cf:f4:33:a7:c1:2f:80:76:ba:09:bc:71:a9:8b:
0c:de:e0:9f:8c:35:5f:9c:71:68:b1:87:d1:6f:6f:
1e:aa:37:bd:2d:fe:23:f3:15:e7:46:44:18:b5:2e:
6c:a8:f6:af:73:98:37:0b:6f:e0:5a:ea:81:d1:76:
68:22:a5:11:ce:7f:e2:53:d8:79:81:a9:80:f7:a9:
ab:94:f2:da:4f:d1:46:92:e8:36:5c:b3:17:83:aa:
01:c5:0e:48:db:90:45:4b:c7:13:66:6a:fa:90:27:
18:3b:66:f8:ff:5a:c0:ec:0f:11:58:e7:ec:a2:ed:
fb:ef:02:5b:79:f5:1e:b7:85:19:8f:c5:dc:42:08:
ca:80:44:c1:73:7d:4a:9f:81:68:e7:95:59:ff:1a:
be:3d:8d:bf:7c:74:3c:82:22:53:fd:45:b8:5d:8d:
d5:e0:c3:92:33:cc:a5:8d:d2:ef:f8:23:cf:36:c9:
37:83:25:87:12:4c:bc:00:57:a5:9e:a0:21:bd:fe:
cf:8e:71:d6:ba:0b:07:dc:68:0d:17:78:b3:54:28:
0f:d0:c1:ee:62:0e:28:76:62:8e:28:cc:79:a1:e8:
fc:5b:5d:d2:88:01:77:b5:db:21:ff:e0:59:13:dd:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:5B:BE:BD:56:00:6B:4C:B9:C9:51:DD:0D:9F:5B:52:7E:28:41
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9c:79:ff:a9:ff:40:56:ae:57:64:9d:b7:3b:e1:d2:a8:db:
a2:03:6a:1c:e8:8d:66:ad:1d:98:16:ba:1c:8c:42:f8:03:ca:
cf:39:e5:b7:74:b6:d2:bc:71:a6:62:db:06:02:de:49:cc:10:
de:74:c3:1a:81:fc:51:28:cb:79:73:07:d3:07:0c:c9:4d:8c:
56:6c:cf:de:1c:ab:b9:76:08:74:2c:64:9d:7d:db:0f:db:e3:
5e:8c:4e:2b:34:60:be:32:e3:3d:12:00:ad:39:33:22:a4:a2:
42:1f:55:54:03:c7:14:94:d4:57:6a:06:c7:c5:49:d3:07:ad:
34:f3:48:0e:17:b8:0c:02:6b:a1:f1:50:09:6f:7f:a6:a3:a9:
72:14:bc:d3:06:81:e2:5f:6b:24:d4:65:38:72:a9:0d:cc:41:
b8:7a:74:d3:fb:dd:cd:9f:08:6b:db:6f:32:5a:be:d4:d1:c3:
03:28:91:35:a3:e3:5a:a1:5d:72:11:3b:3a:b8:b7:0f:08:1a:
2f:7c:f8:a1:e6:cc:7d:2f:ac:6e:1b:58:55:28:38:8c:81:1a:
cb:8c:af:62:70:3c:be:78:0b:a6:9e:ae:99:05:03:30:b8:ff:
2d:7c:d4:ff:0c:54:52:01:ae:22:c0:7c:ed:d5:90:09:97:6e:
1c:4c:1b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:13 2025 by rpki-client